Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/FMfF0PRqbPl1Xgf7uetPmo11RwY.roa
File: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (raw, json)
Hash identifier: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=
Subject key identifier: 14:C7:C5:D0:F4:6A:6C:F9:75:5E:07:FB:B9:EB:4F:9A:8D:75:47:06
Certificate issuer: /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial: 0194221F8B7778D80BA8A99302B40B1EB835
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/FMfF0PRqbPl1Xgf7uetPmo11RwY.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216334
IP address blocks: 109.107.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8b:77:78:d8:0b:a8:a9:93:02:b4:0b:1e:b8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14c7c5d0f46a6cf9755e07fbb9eb4f9a8d754706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:fe:f6:93:00:65:20:c7:25:67:28:7b:17:
8b:21:80:a8:fa:89:f5:ea:1e:28:51:26:98:15:be:
09:f7:b2:21:7d:b3:51:de:ce:77:b3:00:2d:c0:6c:
dd:96:2a:99:d8:d5:d4:c6:57:d1:98:62:bb:31:fd:
a7:30:63:7a:b2:82:dd:dc:53:a9:fb:0a:53:7d:78:
7d:74:3a:a7:52:ce:fb:80:a5:18:d8:17:9e:f4:3d:
2e:6b:cc:54:5a:4b:77:3e:3d:89:cf:63:03:c7:14:
45:5f:4a:ef:e3:76:e0:63:02:ae:54:3c:87:5a:87:
0c:21:b7:c2:e8:4a:cc:dd:3a:fb:d7:c7:23:ef:9f:
27:60:8d:75:49:b5:44:e7:e6:d2:04:4d:55:19:c4:
e4:76:88:e4:44:63:7c:eb:1f:54:c9:3d:12:b1:79:
67:95:9b:03:87:19:7e:13:d7:86:92:12:a0:1e:19:
3f:d7:9e:9e:20:4a:50:17:a5:39:68:3c:23:89:a1:
f6:59:85:3f:a8:d2:18:36:75:3e:68:91:24:3e:49:
29:3c:47:3f:06:40:50:c4:14:05:f6:be:39:ea:30:
e7:fb:42:ed:4b:d6:b5:0d:e7:84:da:9d:65:df:50:
bd:43:3b:f8:5f:21:ce:28:55:19:7c:fc:0d:c4:f6:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:C5:D0:F4:6A:6C:F9:75:5E:07:FB:B9:EB:4F:9A:8D:75:47:06
X509v3 Authority Key Identifier:
keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/FMfF0PRqbPl1Xgf7uetPmo11RwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.161.0/24
Signature Algorithm: sha256WithRSAEncryption
37:37:69:c3:b4:2f:83:70:fc:83:96:7b:67:06:25:b0:ad:c9:
cb:84:96:be:18:04:32:f7:d8:c3:22:73:94:63:a9:65:ca:c9:
b9:de:9f:48:d4:d5:f6:50:00:30:c2:04:8e:69:4a:02:ec:e5:
77:a4:c7:dd:31:8a:47:c6:05:c7:55:1d:c0:81:ae:31:1a:91:
57:78:ac:38:2d:92:58:dc:6b:40:57:cb:99:49:98:01:ac:4d:
31:20:75:bd:72:c7:57:c9:54:d7:5b:9b:8e:59:5e:2a:44:a3:
4e:3e:66:64:34:0e:7c:0b:09:a6:de:11:e1:4e:86:1c:f1:7e:
09:9d:5a:8e:f4:93:97:a3:49:78:f8:0a:7e:32:4e:a0:cc:eb:
10:fc:20:68:77:8e:d3:ed:21:c7:bd:f9:bb:60:98:aa:b7:f5:
94:b5:30:42:a1:18:3f:ba:9a:a0:31:a1:49:41:99:74:c4:0d:
97:a6:f1:12:d6:6d:cf:34:9b:0d:52:da:dc:de:ec:de:37:d0:
fc:69:96:49:d4:03:10:f6:91:0a:30:4b:30:0b:36:94:1a:60:
50:9e:3c:57:7a:ed:2a:8b:97:7b:be:d1:41:c2:89:78:47:27:
ff:be:45:d3:fc:2d:a0:cc:0c:45:b3:c2:85:fe:92:e1:68:d8:
c6:7d:57:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:21:59 2025 by rpki-client